The report presents the results of the EDPB's 2025 Coordinated Enforcement Framework action on the right to erasure under Article 17 GDPR, in which 32 DPAs across Europe examined how 764 controllers implement this right in practice. It identifies seven recurring challenges, including insufficient internal procedures for handling erasure requests, reliance on inefficient anonymisation techniques as an alternative to deletion, inconsistent practices around retention periods, difficulties deleting data from back-ups, and challenges applying the balancing tests required since the right to erasure is not absolute.
Author: European Data Protection Board
Status: Adopted / Published
Adoption date: 2026-02-18
Last updated: 19 Aug 2026
Category: Miscellaneous
Subcategory: Report